jonof/moodle-block_completion_progress

Repo toolingcaution

Composer is used as a build tool, providing basic project tooling, but no security-scanning tools were detected. This is a modest hygiene gap rather than a direct dependency risk.

Security policycaution

The linked repository has no security policy. That reduces vulnerability-reporting transparency, although recent activity and repository tests provide some compensating project evidence.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted-code sinks, but both of its 2 action references are unpinned. That leaves avoidable workflow supply-chain drift risk.